API Security Projecto aims to present unique attack & defense methods in API Security field

Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

😱 A curated list of amazingly awesome OSINT

A python script that finds endpoints in JavaScript files

HTTP parameter discovery suite.

The Bug Hunters Methodology

A curated list of CTF frameworks, libraries, resources and softwares

Guard is a command line tool to easily handle events on file system modifications.

Discovery IP Address of the target

Search for leaked credentials

Most advanced XSS detection suite.

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Bash post exploitation toolkit

Active Directory Assessment and Privilege Escalation Script

shellz is a small utility to track and control your ssh, telnet, web and custom shells.

Packet capture on Windows without a kernel driver

信息安全从业者书单推荐

Repository containing all kinds of resources for running an ARM based fuzzing cluster

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Xori is an automation-ready disassembly and static analysis library for PE32, 32+ and shellcode

Exploit written in Python for CVE-2018-15473 with threading and export formats

a "PoC or GTFO" mirror with extra article index, direct links and clean PDFs.

Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

TrueType and OpenType font fuzzing toolset

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

the only cheat sheet you need

Some scripts and exploits

Instruments to assist in binary application reversing and augmentation, geared towards walled gardens like iOS and macOS